CVE-2026-9547

EUVD-2026-41495
When a libcurl-based application performs transfers via `SCP://` or `SFTP://`
and utilizes the `CURLOPT_SSH_KEYFUNCTION` callback, it may silently accept an
untrusted server. This vulnerability occurs when a server presents a host key
type that does not match the specific key type already recorded for that host
in the `known_hosts` file. Instead of rejecting the mismatch, the callback
mechanism fails to properly enforce the restriction, allowing the connection
to succeed without warning and risking a potential man-in-the-middle attack.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
curlCNA
UNKNOWN
---
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
curlcurl
𝑥
≤ 8.20.0
CNA
curlcurl
𝑥
≤ 8.19.0
CNA
curlcurl
𝑥
≤ 8.18.0
CNA
curlcurl
𝑥
≤ 8.17.0
CNA
curlcurl
𝑥
≤ 8.16.0
CNA
curlcurl
𝑥
≤ 8.15.0
CNA
curlcurl
𝑥
≤ 8.14.1
CNA
curlcurl
𝑥
≤ 8.14.0
CNA
curlcurl
𝑥
≤ 8.13.0
CNA
curlcurl
𝑥
≤ 8.12.1
CNA
curlcurl
𝑥
≤ 8.12.0
CNA
curlcurl
𝑥
≤ 8.11.1
CNA
curlcurl
𝑥
≤ 8.11.0
CNA
curlcurl
𝑥
≤ 8.10.1
CNA
curlcurl
𝑥
≤ 8.10.0
CNA
curlcurl
𝑥
≤ 8.9.1
CNA
curlcurl
𝑥
≤ 8.9.0
CNA
curlcurl
𝑥
≤ 8.8.0
CNA
curlcurl
𝑥
≤ 8.7.1
CNA
curlcurl
𝑥
≤ 8.7.0
CNA
curlcurl
𝑥
≤ 8.6.0
CNA
curlcurl
𝑥
≤ 8.5.0
CNA
curlcurl
𝑥
≤ 8.4.0
CNA
curlcurl
𝑥
≤ 8.3.0
CNA
curlcurl
𝑥
≤ 8.2.1
CNA
curlcurl
𝑥
≤ 8.2.0
CNA
curlcurl
𝑥
≤ 8.1.2
CNA
curlcurl
𝑥
≤ 8.1.1
CNA
curlcurl
𝑥
≤ 8.1.0
CNA
curlcurl
𝑥
≤ 8.0.1
CNA
curlcurl
𝑥
≤ 8.0.0
CNA
curlcurl
𝑥
≤ 7.88.1
CNA
curlcurl
𝑥
≤ 7.88.0
CNA
curlcurl
𝑥
≤ 7.87.0
CNA
curlcurl
𝑥
≤ 7.86.0
CNA
curlcurl
𝑥
≤ 7.85.0
CNA
curlcurl
𝑥
≤ 7.84.0
CNA
curlcurl
𝑥
≤ 7.83.1
CNA
curlcurl
𝑥
≤ 7.83.0
CNA
curlcurl
𝑥
≤ 7.82.0
CNA
curlcurl
𝑥
≤ 7.81.0
CNA
curlcurl
𝑥
≤ 7.80.0
CNA
curlcurl
𝑥
≤ 7.79.1
CNA
curlcurl
𝑥
≤ 7.79.0
CNA
curlcurl
𝑥
≤ 7.78.0
CNA
curlcurl
𝑥
≤ 7.77.0
CNA
curlcurl
𝑥
≤ 7.76.1
CNA
curlcurl
𝑥
≤ 7.76.0
CNA
curlcurl
𝑥
≤ 7.75.0
CNA
curlcurl
𝑥
≤ 7.74.0
CNA
curlcurl
𝑥
≤ 7.73.0
CNA
curlcurl
𝑥
≤ 7.72.0
CNA
curlcurl
𝑥
≤ 7.71.1
CNA
curlcurl
𝑥
≤ 7.71.0
CNA
curlcurl
𝑥
≤ 7.70.0
CNA
curlcurl
𝑥
≤ 7.69.1
CNA
curlcurl
𝑥
≤ 7.69.0
CNA
Debian logo
Debian Releases
Debian Product
Codename
curl
bookworm
vulnerable
bookworm (security)
vulnerable
bullseye
vulnerable
bullseye (security)
vulnerable
forky
vulnerable
sid
8.21.0-2
fixed
trixie
no-dsa